feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Add blinding of mod inverse to RSA key gen

Browse Source
This commit is contained in:
Sean Parkinson
2019-12-20 12:12:38 +10:00
parent 51f956490f
commit 9d94b48056
1 changed files with 29 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
wolfcrypt/src/rsa.c
View File

@ -4026,13 +4026,42 @@ int wc_MakeRsaKey(RsaKey* key, int size, long e, WC_RNG* rng)
err = mp_sub_d(&p, 1, &tmp1); err = mp_sub_d(&p, 1, &tmp1);
if (err == MP_OKAY) /* tmp2 = q-1 */ if (err == MP_OKAY) /* tmp2 = q-1 */
err = mp_sub_d(&q, 1, &tmp2); err = mp_sub_d(&q, 1, &tmp2);
#ifndef WC_RSA_BLINDING
if (err == MP_OKAY) /* tmp3 = order of n */
err = mp_mul(&tmp1, &tmp2, &tmp3);
#else
if (err == MP_OKAY) /* tmp3 = lcm(p-1, q-1), last loop */ if (err == MP_OKAY) /* tmp3 = lcm(p-1, q-1), last loop */
err = mp_lcm(&tmp1, &tmp2, &tmp3); err = mp_lcm(&tmp1, &tmp2, &tmp3);
#endif
/* make key */ /* make key */
if (err == MP_OKAY) /* key->e = e */ if (err == MP_OKAY) /* key->e = e */
err = mp_set_int(&key->e, (mp_digit)e); err = mp_set_int(&key->e, (mp_digit)e);
#ifdef WC_RSA_BLINDING
/* Blind the inverse operation with a value that is invertable */
if (err == MP_OKAY) {
do {
err = mp_rand(&key->p, get_digit_count(&tmp3), rng);
if (err == MP_OKAY)
err = mp_set_bit(&key->p, 0);
if (err == MP_OKAY)
err = mp_set_bit(&key->p, size - 1);
if (err == MP_OKAY)
err = mp_gcd(&key->p, &tmp3, &key->q);
}
while ((err == MP_OKAY) && !mp_isone(&key->q));
}
if (err == MP_OKAY)
err = mp_mul_d(&key->p, (mp_digit)e, &key->e);
#endif
if (err == MP_OKAY) /* key->d = 1/e mod lcm(p-1, q-1) */ if (err == MP_OKAY) /* key->d = 1/e mod lcm(p-1, q-1) */
err = mp_invmod(&key->e, &tmp3, &key->d); err = mp_invmod(&key->e, &tmp3, &key->d);
#ifdef WC_RSA_BLINDING
/* Take off blinding from d and reset e */
if (err == MP_OKAY)
err = mp_mulmod(&key->d, &key->p, &tmp3, &key->d);
if (err == MP_OKAY)
err = mp_set_int(&key->e, (mp_digit)e);
#endif
if (err == MP_OKAY) /* key->n = pq */ if (err == MP_OKAY) /* key->n = pq */
err = mp_mul(&p, &q, &key->n); err = mp_mul(&p, &q, &key->n);
if (err == MP_OKAY) /* key->dP = d mod(p-1) */ if (err == MP_OKAY) /* key->dP = d mod(p-1) */